Removing passwords from create/update responses